Network Security Archives

February 28, 2005

[Snort-users] Overhead caused by PCRE?, Jeff McCarthy, 22:42
[Snort-sigs] FPs with "NETBIOS SMB Trans2 FIND_FIRST2 response overflow attempt", Jason Haar, 19:30
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 16:37
[Snort-sigs] False positive and negative in 2416.5 (FTP invalid MDTM command attempt), nnposter, 16:36
[Snort-sigs] Broken 1653.7 (WEB-CGI campus access ), nnposter, 16:36

February 25, 2005

Re: [Snort-sigs] New signatures for CAN numbers below, Nigel Houghton, 13:31
[Snort-sigs] SID 1:1384 False Positive, nikns, 11:10
[Snort-sigs] New signatures for CAN numbers below, Stephanie Tan, 03:47

February 24, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:15

February 23, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:30
Re: [Snort-sigs] Symantec vulnerability, Matt Kettler, 14:16

February 22, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:33
[Snort-sigs] Symantec vulnerability, Rowland, Krisa W ERDC-ITL-MS Contractor, 19:54
RE: [Snort-sigs] Bleeding rules virus and threshold issue, Mark Scott, 11:39

February 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:33
RE: [Snort-sigs] Bleeding rules virus and threshold issue, Frank Knobbe, 21:23
RE: [Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 21:13
RE: [Snort-sigs] Bleeding rules virus and threshold issue, Frank Knobbe, 21:13
RE: [Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 21:03
RE: [Snort-sigs] Bleeding rules virus and threshold issue, Frank Knobbe, 21:03
RE: [Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 21:03
RE: [Snort-sigs] Bleeding rules virus and threshold issue, Frank Knobbe, 20:53
RE: [Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 20:53
RE: [Snort-sigs] Bleeding rules virus and threshold issue, Frank Knobbe, 20:53
RE: [Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 20:53
Re: [Snort-sigs] Bleeding rules virus and threshold issue, Frank Knobbe, 13:50
[Snort-sigs] False positive in the intrusion prevention, Esbjörn Krantzén , 11:59
Re: [Snort-sigs] Bleeding rules virus and threshold issue, Matt Jonkman, 11:59
[Snort-sigs] SID 1:2278 False Positive, Juan Alvarez Ferrando, 11:38
[Snort-sigs] Assessing your malware exposure with Snort, particle . bored, 11:38
[Snort-sigs] sid 2586 False positive documentation, Burtoft, Jim, 11:38
Re: [Snort-sigs] OT: cleanup in Bleeding edge rules, Matt Jonkman, 11:28
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 11:28
Re: [Snort-sigs] Windows Messenger/MSN Messenger, Matt Jonkman, 11:28
RE: [Snort-sigs] SID:2229 - False positives, Ofer Shezaf, 11:28
RE: [Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 11:28

February 20, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:31

February 19, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:10
Re: [Snort-sigs] Bleeding rules virus and threshold issue, Matt Jonkman, 15:57
[Snort-sigs] Bleeding rules virus and threshold issue, James Lay, 12:46
[Snort-sigs] FP for WEB-CLIENT winamp .cda file name overflow attempt Sig ID 3088, Russell Fulton, 00:11

February 18, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:09
[Snort-sigs] Anyone got an *incoming* Bropia rule?, Jason Haar, 03:11

February 17, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:18

February 16, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:14

February 15, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:13

February 14, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:12
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 03:24
Re: [Snort-sigs] OT: cleanup in Bleeding edge rules, Frank Knobbe, 03:24
[Snort-sigs] OT: cleanup in Bleeding edge rules, Jason Haar, 03:24
[Snort-sigs] FPs for BLEEDING-EDGE SSL Bomb DoS Attempt sid:2000016, Russell Fulton, 03:24

February 11, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:16
[Snort-sigs] Possible error in 3066.2 (IMAP append overflow attempt), nnposter, 18:44
[Snort-sigs] snort-rules update @ Fri Feb 11 16:16:31 2005, bmc, 18:34

February 10, 2005

[Snort-sigs] AOL and SID2570, mdpeters, 13:49
Re: [Snort-sigs] snort-rules update @ Wed Feb 9 20:15:50 2005, Frank Knobbe, 00:53

February 09, 2005

[Snort-sigs] snort-rules update @ Wed Feb 9 20:15:50 2005, bmc, 22:32
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:11
Re: [Snort-sigs] http post on port 25, hans, 17:19
RE: [Snort-sigs] Windows Messenger/MSN Messenger, Jaramillo, Paul D [CC], 15:37
Re: [Snort-sigs] Windows Messenger/MSN Messenger, J-H Johansen, 15:27
[Snort-sigs] Windows Messenger/MSN Messenger, Jaramillo, Paul D [CC], 14:27
[Snort-sigs] Update to snort rules (SNMP AgentX/tcp request), Bill Bernabe, 11:35

February 08, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:09
[Snort-sigs] SID:2229 - False positives, Paul Schmehl, 20:38
RE: [Snort-sigs] http post on port 25, Joe Patterson, 20:38
Re: [Snort-sigs] http post on port 25, hans, 18:58
RE: [Snort-sigs] http post on port 25, Joe Patterson, 17:07
[Snort-sigs] WINS Rule Testing Requested, Alex Kirk, 15:26
[Snort-sigs] http post on port 25, hans, 13:55

February 07, 2005

Re: [Snort-sigs] False positive with Nagios check_http, Frank Knobbe, 15:14
[Snort-sigs] snort usage, s a, 11:53
[Snort-sigs] Help find error, Brian Jameson, 11:53
[Snort-sigs] (no subject), Brian Jameson, 11:53
[Snort-sigs] SIG 1:2515 Possible False Positive submission, Clay P. Campbell, 11:53
[Snort-sigs] False positive with Nagios check_http, Carsten Schmitz, 08:00

February 04, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:15
Re: [Snort-sigs] False positive in 882.5 (WEB-CGI calendar access), BoFH, 18:44
[Snort-sigs] False positive in 882.5 (WEB-CGI calendar access), nnposter, 18:34
[Snort-sigs] SnortCenter, Paul Ryan, 14:42
[Snort-sigs] Regarding Snort usage, s a, 13:01
Re: [Snort-users] streaming media detection, Joel Esler, 13:01

February 03, 2005

RE: [Snort-sigs] New LSASS Worm?, Wiryanto Victor, 22:25
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:15
Re: [Snort-users] streaming media detection, Seth Art, 17:53
Re: [Snort-sigs] New LSASS Worm?, James Riden, 17:13
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Nigel Houghton, 14:31
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Frank Knobbe, 14:21
RE: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dllbuffer overflow attempt), Frank Knobbe, 14:11
RE: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dllbuffer overflow attempt), Joe Patterson, 13:51
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Nigel Houghton, 10:39
[Snort-sigs] New LSASS Worm?, Wiryanto Victor, 06:58
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Frank Knobbe, 04:56
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Nigel Houghton, 02:25
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Frank Knobbe, 02:05

February 02, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:13
Why the large updates: [Snort-sigs] Bleedingsnort.com Daily Update, Matt Jonkman, 14:40
[Snort-sigs] Fwd: Duplicate icmp SID 482?, xaz129, 13:49
[Snort-sigs] Duplicate icmp SID 482?, xaz129, 13:49
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 13:49
[Snort-sigs] False positive, Tim Boyer, 13:39